Security tools · GitHub stars

1NationalSecurityAgency / ghidraGhidra is a software reverse engineering (SRE) frameworkJavaApache-2.0 · Permissive98,235

2sherlock-project / sherlockFind public social-network accounts by username.PythonMIT · Permissive97,232

3home-assistant / core:house_with_garden: Open source home automation that puts local control and privacy first.PythonApache-2.0 · Permissive92,003

4Z4nzu / hackingtoolALL IN ONE Hacking Tool For HackersPythonMIT · Permissive81,619

5danielmiessler / SecListsSecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.PHPMIT · Permissive74,513

6unionlabs / unionThe trust-minimized, zero-knowledge bridging protocol, designed for censorship resistance, extremely high security, and usage in decentralized finance.RustApache-2.0 · Permissive73,719

7usestrix / strixAn AI-assisted application penetration-testing tool.PythonApache-2.0 · Permissive73,374

8dani-garcia / vaultwardenProvide an unofficial password-vault server compatible with Bitwarden clients.RustAGPL-3.0 · Share derivative source70,123

9pi-hole / pi-holeA black hole for Internet advertisementsShellLicense not declared61,635

10KeygraphHQ / shannonAn AI-assisted security tester for web applications and APIs.TypeScriptAGPL-3.0 · Share derivative source50,960

11mitmproxy / mitmproxyAn interactive proxy for inspecting HTTP and TLS traffic.PythonMIT · Permissive46,565

12GyulyVGC / sniffnetA graphical tool for monitoring network traffic.RustApache-2.0 · Permissive41,919

13umami-software / umamiUmami is a privacy-first web and product analytics platform. Traffic, campaigns, behavior, conversions, and revenue in one place. No cookies, no surveillance, self-hosted or in the cloud.TypeScriptMIT · Permissive39,882

14rapid7 / metasploit-frameworkMetasploit FrameworkRubyLicense not declared39,298

15aquasecurity / trivyA scanner for security issues in containers, code and cloud environments.GoApache-2.0 · Permissive39,051

16sqlmapproject / sqlmapA tool for SQL injection detection and database security assessment.PythonLicense not declared38,830

17AdguardTeam / AdGuardHomeA DNS server for network-wide ad and tracker filtering.TypeScriptGPL-3.0 · Share derivative source38,198

18blakeblackshear / frigateNVR with realtime local object detection for IP camerasPythonMIT · Permissive37,282

19hashicorp / vaultA tool for secrets management, encryption as a service, and privileged access managementGoLicense not declared36,473

20lissy93 / web-checkA tool for analyzing publicly available website information.TypeScriptMIT · Permissive35,331